Hi David, It sounds like you are running into CSCsj53102. What version are you running on your 8.0 devices?
Sincerely, David. David Coulson wrote: > I have a number of ASAs and Pix devices with interconnected VPNs. From > each LAN I can telnet into the local device, however on both an > ASA5510 and Pix515 running 8.0 I am unable to telnet into the device > from across a VPN. An older Pix501 running 6.3 will allow me. I can > ping across the VPNs to each device. > > In all cases 'management-access inside' is enabled and the appropriate > remote subnet is in a 'telnet x.x.x.x y.y.y.y' statement. The telnet > client thinks the connection is open, but I don't get a login prompt. > > Log output when I attempt to telnet to the 515 - Not sure I understand > the TCP intercept part of this. Maybe that is the smoking gun. > > Feb 06 2010 21:36:13: %PIX-6-302013: Built inbound TCP connection 367 > for outside:172.17.6.102/3158 (172.17.6.102/3158) to NP Identity > Ifc:172.16.5.1/23 (172.16.5.1/23) > Feb 06 2010 21:36:13: %PIX-6-302014: Teardown TCP connection 367 for > outside:172.17.6.102/3158 to NP Identity Ifc:172.16.5.1/23 duration > 0:00:00 bytes 0 Flow terminated by TCP Intercept > Feb 06 2010 21:36:13: %PIX-6-302013: Built inbound TCP connection 368 > for outside:172.17.6.102/3158 (172.17.6.102/3158) to NP Identity > Ifc:172.16.5.1/23 (172.16.5.1/23) > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
